Memory System Asymmetric Key Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing techniques for maintaining authenticity of system identities in computing platforms, particularly between host systems and memory systems, are vulnerable to identification information being stolen or cloned, and may not effectively implement cryptographic protection within the context of signaling between these systems.
Innovation Solution
Implementing asymmetric cryptographic security functionality directly in memory systems, where a memory system is cryptographically identified by a public asymmetric key associated with its unique hardware identity, and authenticity is proven by signing a challenge using a private asymmetric key. Similarly, host systems are identified by signing commands with their private asymmetric key, verified by the memory system using the host system's public asymmetric key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric cryptographic security functionality is implemented directly in memory systems, then security and verification of authenticity are enhanced, but device complexity increases
Solution Approach 1:
The patent merges cryptographic security functionality directly into the memory system by integrating asymmetric key pair generation, signing operations, and verification capabilities within the memory device itself. This combination eliminates the need for separate security modules and enables self-contained authentication between host and memory system, resolving the contradiction by making the security functions an inherent part of the memory system architecture.
2Reliability
If multi-factor authentication based on internal asymmetric keys is implemented, then security against stolen or cloned identification information is improved, but ease of operation deteriorates
Solution Approach 1:
The memory system performs self-service authentication by automatically generating asymmetric key pairs internally and using these keys to sign and verify authentication challenges without requiring external security hardware or manual intervention. The private key remains securely stored within the memory system, performing cryptographic operations autonomously, which simplifies the overall authentication process while maintaining high security standards.
Data Source
AI summary
Methods, systems, and devices for multi-factor authentication for memory systems based on internal asymmetric keys are described. In some examples, host systems and memory systems may be configured to implement techniques for the generation and distribution of asymmetric keys, certificates, or both, which may support evaluating the authenticity of interfacing systems (e.g., by signing and verifying exchanged signaling based on system identities) or protecting the integrity of exchanged signaling (e.g., by encrypting exchanged signaling), or both. Such techniques may include implementing asymmetric cryptographic security functionality directly in a memory system, including techniques where the memory system is configured to generate asymmetric key pairs, certificates, or both based on a combination of unique device secret and content stored at the memory system.